Stealer 10x

xiaozhu009

cloudy通过QQ闪传分享了【20260419Stealer 10x】
链接：https://qfile.qq.com/q/uOl6pWeleU

a2650183122

卡巴杀9个剩了1个

hashcake

请输入要扫描的文件夹/文件: d:\Users\Administrator\Downloads\20260419Stealer 10x
扫描状态: 已扫描 3 文件 | 威胁: 0 | 当前: common.dat
common.dat ZX_FML_TEX:0.96778324 ZX:0.9628619241714478 FML:0.8323311740159989 TEX:1.0149411857128143

CheatsLauncher.dll ZX_FML_TEX:0.90396555 ZX:0.9921951323747635 FML:0.9829358690977097 TEX:0.7053708344697952
发现威胁: d:\Users\Administrator\Downloads\20260419Stealer 10x\CheatsLauncher.dll (置信度: 0.903966)
扫描状态: 已扫描 4 文件 | 威胁: 1 | 当前: ElysionLauncher.exe
build-myth.exe(zx:0.65511066)(conv:0.50272000)(FML:0.99833888)(TEX:0.27292624) final:0.6756841075049465
发现威胁: d:\Users\Administrator\Downloads\20260419Stealer 10x\build-myth.exe (置信度: 0.675684)
发现威胁: d:\Users\Administrator\Downloads\20260419Stealer 10x\common.dat (置信度: 0.967783)
扫描状态: 已扫描 5 文件 | 威胁: 3 | 当前: Main Setup.zip
ElysionLauncher.exe ZX_FML_TEX:0.96405276 ZX:0.998903174996376 FML:0.9933723068237305 TEX:0.9267300689220429
发现威胁: d:\Users\Administrator\Downloads\20260419Stealer 10x\ElysionLauncher.exe (置信度: 0.964053)
扫描状态: 已扫描 6 文件 | 威胁: 4 | 当前: MpDlpService.exe
MpDlpService.exe ZX_FML_TEX:0.32650095 ZX:0.8982679069042205 FML:0.7516554445028305 TEX:-0.014997460191359564
扫描状态: 已扫描 7 文件 | 威胁: 4 | 当前: start.exe
start.exe ZX_FML_TEX:0.91130142 ZX:0.9994361317157745 FML:0.9876239252090454 TEX:0.7465068852901459
发现威胁: d:\Users\Administrator\Downloads\20260419Stealer 10x\start.exe (置信度: 0.911301)
扫描状态: 已扫描 9 文件 | 威胁: 5 | 当前: Setup.py
Setup.exe ZX_FML_TEX:0.36252262 ZX:0.4676202756166458 FML:0.8954074120521546 TEX:-0.0005050696618855138
扫描状态: 已扫描 99 文件 | 威胁: 5 | 当前: libEGL.dll
d3dcompiler_47.dll ZX_FML_TEX:0.00124280 ZX:-0.002045831680297856 FML:0.04113668121397496 TEX:-0.014960789484721331

libEGL.dll ZX_FML_TEX:0.03965787 ZX:0.2558619964122772 FML:0.03659188691526652 TEX:-0.014998324007134457
扫描状态: 已扫描 101 文件 | 威胁: 5 | 当前: libpython3.9.dll
libGLESv2.dll ZX_FML_TEX:0.03827701 ZX:0.02810929656028747 FML:0.11695488192141057 TEX:0.012032662555575358

libpython3.9.dll ZX_FML_TEX:0.04206785 ZX:0.047920320630073544 FML:0.06846532598137856 TEX:0.027214603088796127
扫描状态: 已扫描 103 文件 | 威胁: 5 | 当前: libwinpthread-1.dll
librenpython.dll ZX_FML_TEX:0.04822408 ZX:0.048232280611991876 FML:0.14863644346594812 TEX:0.011540938969701516

libwinpthread-1.dll ZX_FML_TEX:0.03946289 ZX:0.2645299327373505 FML:0.034343131929636006 TEX:-0.014974629553744321
扫描状态: 已扫描 105 文件 | 威胁: 5 | 当前: nvdrs.dll
nvdrs.dll ZX_FML_TEX:0.02269669 ZX:0.08370180547237396 FML:0.011030224198475484 TEX:0.0027677125111222143
扫描状态: 已扫描 107 文件 | 威胁: 5 | 当前: pythonw.exe
python.exe ZX_FML_TEX:0.06325282 ZX:0.4372154349088669 FML:0.6387711697816849 TEX:-0.012733781060669585

pythonw.exe ZX_FML_TEX:0.07742479 ZX:0.45050840973854067 FML:0.6396501618623733 TEX:-0.012733781060669585
扫描状态: 已扫描 1425 文件 | 威胁: 5 | 当前: Binary.Data
Binary.ConfigModule ZX_FML_TEX:0.04510482 ZX:0.24235079407691956 FML:0.06090022820979357 TEX:-0.01479572579293746
扫描完成！
路径: d:\Users\Administrator\Downloads\20260419Stealer 10x
用时: 00:00:09
已扫描: 1427 文件
发现威胁: 5
请输入要扫描的文件夹/文件:

kkdy

小A监控杀9，剩余一个扫描杀黑文件，基本等效于全杀

心醉咖啡

360

cat-2021

elastic静态k7，运行行为阻止x2，杀衍生物x1

xiaobaobao20

fsp剩一剩下双击无反应

MrDeep

1. C:\Users\*\Desktop\build-myth.exe - JS/PSW.Agent.CP trojan
2. C:\Users\*\AppData\Local\Temp\7zE8EF5331E\data\archive.rpa - Python/Agent.BVZ trojan
3. C:\Users\*\AppData\Local\Temp\7zE8EF5331E\data\.key - Python/Agent.BVZ trojan
4. C:\Users\*\AppData\Local\Temp\7zE4268D6BC\start.exe - a variant of WinGo/Agent_AGen.XS trojan
5. C:\Users\*\AppData\Local\Temp\7zE4268D6BC\ElysionLauncher.exe - a variant of WinGo/Agent_AGen.OW trojan
6. C:\Users\*\AppData\Local\Temp\7zE4268D6BC\CheatsLauncher.dll - a variant of MSIL/TrojanDropper.Agent.FOV trojan
7. C:\Users\*\AppData\Local\Temp\7zE4268D6BC\common.dat - Python/TrojanDropper.Agent.NH trojan
8. C:\Users\*\AppData\Local\Temp\7zE4268D6BC\MpDlpService.exe - a variant of WinGo/Kryptik.RB trojan
9. C:\Users\*\AppData\Local\Temp\7zE4268D6BC\Silent V4.msi - a variant of Win64/Kryptik.GSB trojan

剩余这些文件和文件夹
data
lib
renpy
Setup.exe
Setup.py

123456aaaafsdeg

xjwtzq

奇安信kill  7，拦截1